For detailed information about supported Operating System, see the interactive UCS Hardware and Software Compatibility matrix.

Cisco recommends the following browsers for Cisco UCS Rack Server Software, Release 4.1(3):

• Microsoft Edge 87.0.664.47 or higher (64-bit)

• Google Chrome Version 87.0.4280.66 or higher (64-bit)

• Microsoft Internet Explorer 11.0.9600 or higher

• Mozilla Firefox 66.0.2 or higher (64-bit)

• Safari 14.0.1 or higher

Note	If the management client is launched using an unsupported browser, check the help information from the For best results use supported browsers option available in the login window for the supported browser versions.

Transport Layer Security (TLS) version 1.2.

The following Security Fixes were added in Release 4.1(3m):

Defect ID - CSCwf30468

Cisco UCS C-Series M5 Rack Servers include an Intel^® processor that is affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) ID(s):

• CVE-2022-40982—Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel^® Processors may allow an authenticated user to potentially enable information disclosure through local access.

• CVE-2022-43505—Insufficient control flow management in the BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable denial of service through local access.

Defect ID - CSCwe96259

Cisco UCS C-Series Rack Servers are affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) ID(s):

• CVE-2023-20228—A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

Defect ID - CSCwf98321

Cisco UCS S-Series S3260 M4 Rack Servers are affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) ID(s):

• CVE-2022-38083—Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure through local access.

• CVE-2022-43505—Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service through local access.

The following Security Fix was added in Release 4.1(3i):

Defect ID - CSCwb67159

Cisco UCS C-Series M5 Rack Servers include an Intel^® processor that is affected by the vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) ID(s):

• CVE-2021-0189—Use of out-of-range pointer offset in the BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2021-0159—Improper input validation in the BIOS authenticated code module for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2021-33123—Improper access control in the BIOS authenticated code module for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2021-33124—Out-of-bounds write in the BIOS authenticated code module for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2022-21131—Improper access control for some Intel^® Xeon^® Processors may allow an authenticated user to potentially enable information disclosure through local access.

• CVE-2022-21136—Improper input validation for some Intel^® Xeon^® Processors may allow a privileged user to potentially enable denial of service through local access.

The following Security Fix was added in Release 4.1(3h):

Defect ID - CSCwb67159

Cisco UCS M5 servers, based on Intel^® Processors are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2021-0154—Improper input validation in the BIOS firmware for some Intel^® Processors may allow a privileged user to enable escalation of privilege through local access.

• CVE-2021-0155—Unchecked return value in the BIOS firmware for some Intel^® Processors might allow a privileged user to enable information disclosure through local access.

• CVE-2021-0189—Use of out-of-range pointer offset in the BIOS firmware for some Intel^® Processors might allow a privileged user to enable escalation of privilege through local access.

• CVE-2021-33123—Improper access control in the BIOS authenticated code module for some Intel^® Processors might allow a privileged user to enable escalation of privilege through local access.

• CVE-2021-33124—Out-of-bounds write in the BIOS authenticated code module for some Intel^® Processors might allow a privileged user to enable escalation of privilege through local access.

The following Security Fixes were added in Release 4.1(3f):

Defect ID - CSCvy91321

Cisco Integrated Management Controller (IMC) Software are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2021-34736—A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart.

  The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.

  Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Defect ID - CSCvz48566

Cisco UCS C220 M4 and M5 servers are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2021-3712—ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure, which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are represented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own d2i functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure.

  However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the data field, then a read buffer overrun can occur.

  The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions.

  An attacker can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext).

This release includes SSL revisions for Cisco UCS M4 and M5 rack servers. These revisions include update for rack servers, which is a required part of the mitigation for these vulnerabilities.

Defect ID - CSCvz48570

Cisco UCS C220 M4 and M5 servers are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2021-3711—Implementation of the SM2 decryption code that can lead to a buffer overflow when calling the API function to decrypt SM2 encrypted data. An attacker presenting a specially crafted SM2 content may be able to exploit the vulnerability and change application behavior or cause the application to crash. An attacker exploiting the vulnerability may be able to disclose private memory contents or perform a Denial of Service (DoS) attack.

This release includes SSL revisions for Cisco UCS M4 and M5 rack servers. These revisions include update for rack servers, which is a required part of the mitigation for these vulnerabilities.

The following Security Fixes were added in Release 4.1(3d):

Defect ID - CSCvy16762

Cisco UCS C-Series and S-Series M5 servers, based on Intel^® Processors are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2020-12358—Out of bounds write in the firmware for some Intel^® Processors may allow a privileged user to enable denial of service through local access.

• CVE-2020-12360—Out of bounds read in the firmware for some Intel^® Processors may allow an authenticated user to enable escalation of privilege through local access.

• CVE-2020-24486—Improper input validation in the firmware for some Intel^® Processors may allow an authenticated user to enable denial of service through local access.

• CVE-2020-24511—Improper isolation of shared resources in some Intel^® Processors may allow an authenticated user to enable information disclosure through local access.

This release includes BIOS revisions for Cisco UCS M5 rack servers. These BIOS revisions include Microcode update for Cisco UCS M5 rack servers, which is a required part of the mitigation for these vulnerabilities.

The following Security Fixes were added in Release 4.1(3c):

Defect ID - CSCvx82648

Cisco UCS C-Series and S-Series M5 servers, based on Intel^® Processors are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2021-3449—may allow a remote unauthenticated user to crash a TLS server resulting in a Denial of Service (DoS) condition.

• CVE-2021-3450—may allow a remote unauthenticated user to conduct a MiTM attack or to impersonate another user or device by providing a crafted certificate.

The following Security Fixes were added in Release 4.1(3b):

Defect ID - CSCvv34145

Cisco UCS C-Series and S-Series M5 servers, based on Intel^® Processors are affected by vulnerabilities identified by the following Common Vulnerability and Exposures (CVE) IDs:

• CVE-2020-0587—Improper conditions check in BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-0588—Improper conditions check in BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-0590—Improper input validation in BIOS firmware for some Intel^® Processors may allow an authenticated user to potentially enable escalation of privilege through local access.

• CVE-2020-0591—Improper buffer restrictions in BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-0592—Out of bounds write in BIOS firmware for some Intel^® Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service through local access.

• CVE-2020-0593—Improper buffer restrictions in BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-8696—Improper removal of sensitive information before storage or transfer in some Intel^® Processors may allow an authenticated user to potentially enable information disclosure through local access.

• CVE-2020-8698—Improper isolation of shared resources in some Intel^® Processors may allow an authenticated user to potentially enable information disclosure through local access.

• CVE-2020-8705—Insecure default initialization of resource in Intel^® Boot Guard in Intel^® CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel^® TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges through physical access.

• CVE-2020-8755—Race condition in subsystem for Intel^® CSME versions before 12.0.70 and 14.0.45, Intel^® SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege through physical access.

• CVE-2020-8738—Improper conditions check in Intel^® BIOS platform sample code for some Intel^® Processors before may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-8739—Use of potentially dangerous function in Intel BIOS platform sample code for some Intel^® Processors may allow an authenticated user to potentially enable escalation of privilege through local access.

• CVE-2020-8740—Out of bounds write in Intel BIOS platform sample code for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

• CVE-2020-8764—Improper access control in BIOS firmware for some Intel^® Processors may allow a privileged user to potentially enable escalation of privilege through local access.

The following caveats were resolved in Release 4.1(3n):

The following caveats were resolved in Release 4.1(3m):

The following defects were resolved in Release 4.1(3l):

The following defects are open in Release 4.1(3c):

The following defects are open in Release 4.1(3b):

The following caveat is a known limitation in release 4.1(3g):

The following caveats are known limitations in release 4.1(3d):

The following caveats are known limitations in release 4.1(3b):